Commit Graph
10 Commits
Author SHA1 Message Date
Damien fe284d8a38 fix(proxy): exclude git-over-HTTPS 401s from traefik fail2ban jail
Git smart-HTTP always fires an unauthenticated request first, gets a
401 challenge, then retries with credentials. On a private repo, ~10
git operations in 5 minutes hit maxretry and ban the legitimate
client for an hour. Excludes 401s on info/refs, git-upload-pack and
git-receive-pack while leaving other 401 sources (UI, API) covered.

Closes #17
2026-07-31 17:15:04 +02:00
Damien 9f6e583135 Update proxy server installation script
Switch to Let's Encrypt HTTP challenge
Add Tailscale exit node support
Add Fail2ban protection for Traefik
Improve idempotency and error handling
2026-05-13 16:37:15 +02:00
Damien 7c3cab2b5a Update proxy installer to use Traefik v3 with Fail2ban and Infomaniak
DNS
2026-05-13 10:39:44 +02:00
Damien 13d97ff627 feat(proxy): add MOTD configuration 2026-01-11 19:00:39 +00:00
Damien 4935ae3c3e refactor(proxy): use robust awk-based Tailscale FQDN extraction from seedbox 2026-01-11 18:51:01 +00:00
Damien 1dad64cb07 Actualiser proxy/install.sh 2025-12-31 17:35:10 +00:00
Damien 2bc5e3a273 docs(proxy): add SSH safety net documentation 2025-12-26 11:24:51 +00:00
Damien 625dc5ada7 feat(proxy): add temporary SSH access with scheduled cleanup 2025-12-26 11:24:30 +00:00
Damien 3ceb33038c docs: add proxy-specific README 2025-12-03 09:13:07 +00:00
Damien 0807beb5fa feat: add proxy server deployment script 2025-12-03 09:09:39 +00:00